Sellora — Meesho Sync Pro

1. Extension Identification & Scope

This Privacy Policy governs the use of the Sellora — Meesho Sync Pro Chrome Extension (Version 1.0.0, Manifest V3), published by AV STUDIO & CO. ("we", "us", or "our").

Non-Affiliation Notice: Sellora — Meesho Sync Pro is an independent seller analytics and financial reconciliation utility. It is not affiliated with, endorsed by, or officially connected to Meesho (Fashnear Technologies Private Limited).

2. Information Accessed & Processed

Sellora — Meesho Sync Pro accesses and processes information strictly from two user-authorized sources:

A. User-Selected Meesho Report Files (CSV, XLSX, and ZIP Archives)

When you upload or drag-and-drop report files into the extension's Import Center, the local parser reads and normalizes the following seller and order records:

• Orders & Sub-Orders: Order ID, Sub-Order ID, SKU, product name/title, quantity, order date, dispatch date, delivery date, order status, supplier listed price, supplier discounted price, total sale amount, GST rate, and customer destination state (customerState).
• Payments & Settlements: Transaction/UTR/NEFT reference numbers, payment dates, settlement periods, transaction types, gross order payout amounts, forward shipping charges, return shipping charges, TCS/TDS tax deductions, marketplace fee/penalty deductions, compensation credits, ad spend deductions, and final net settlement amounts.
• Returns & RTOs: Return/RTO identifiers, AWB tracking numbers, courier partner names, return types (Customer Return vs. RTO), return statuses, return dates, reverse shipping fees, and return reasons.
• Seller Claims & Compensation: Claim/ticket IDs, claim categories, claimed amounts, approved/recovered amounts, pending/rejected amounts, claim statuses, and resolution notes.
• Advertising Expenses: Campaign IDs, campaign names, spend dates, base ad spend, GST on ads, total ad deductions, impressions, clicks, ad orders, and ad revenue.

B. Meesho Supplier Portal Page Context (https://supplier.meesho.com/*)

When you visit https://supplier.meesho.com/*, the extension's content script reads the current page URL (window.location.href and window.location.pathname) to identify which portal section you are viewing (such as Orders, Payments, Returns, Claims, or Inventory) and mounts an isolated Shadow DOM KPI summary panel (#sellora-meesho-sync-pro-root) displaying metrics calculated from your locally imported reports.

The content script automatically disables and removes itself on authentication routes (/login, /signup, and /forgot-password). It does not read passwords, extract authentication cookies or session tokens, scrape live DOM tables, or interfere with order processing or catalog updates.

3. Purposes of Data Processing

All data accessed by Sellora — Meesho Sync Pro is processed solely inside your browser to provide the extension's core seller features:

• Parsing, validating, and deduplicating uploaded Meesho CSV, XLSX, and ZIP reports.
• Calculating 18+ seller financial KPIs (including Gross Sales, Gross Payout, Net Settled Amount, Pending Settlement Estimate, Return Deductions, Shipping Charges, Advertising Spend, and Claim Recovery Rate) and optional configured profit estimates.
• Running automated cross-report reconciliation to flag unlinked orders, orphan payments, unlinked returns, duplicate/conflicting UTR entries, unresolved claims, and settlement variances.
• Displaying a non-intrusive KPI summary panel on authorized https://supplier.meesho.com/* pages.
• Running scheduled daily local reconciliation checks and missing-report or settlement reminders via Chrome's alarms API.
• Allowing you to export filtered CSV reports and create encrypted or unencrypted local JSON database backups.

4. Local Browser Storage & Chrome Permissions

All extension data is stored locally on your device inside your browser's IndexedDB database named SelloraMeeshoSyncProDB, organized into 11 object stores: orders, payments, returns, claims, compensations, ads, settlements, import_jobs, source_files, reconciliation_issues, and settings.

5. Network Transmission, Analytics & Third-Party Services

• Zero External Network Requests: The extension contains no fetch(), XMLHttpRequest, WebSocket, or navigator.sendBeacon calls to any external server.
• Strict Content Security Policy (CSP): The extension's manifest.json enforces "script-src 'self'; object-src 'self'; connect-src 'self';", which blocks outbound network connections from extension pages at the browser level.
• No Analytics, Telemetry, or AI Services: The extension does not integrate Google Analytics, crash reporters, advertising pixels, telemetry SDKs, or external AI/LLM APIs.

6. Data Sharing, Sale & Transfers

Because neither AV STUDIO & CO. nor any third party ever receives your data over the network:

• We do not collect, transmit, access, rent, sell, or share your financial records, seller metrics, or customer details.
• We do not transfer user data to third parties for advertising, creditworthiness lending, or data brokerage.

7. Data Retention & Deletion Behavior

All imported records and settings remain stored locally in your browser's IndexedDB (SelloraMeeshoSyncProDB) until you choose to delete them or uninstall the extension.

A. Using "Delete All Financial Data" in the Extension

In the extension dashboard under Automation & Settings → Local Database Backup, Restore & Privacy Controls, clicking "Delete All Financial Data" (and confirming "Yes, Erase All Data") — or clicking "Clear Demo Data" when demo records are active — immediately executes db.clearAllFinancialData(), which permanently erases all records across the 10 financial and audit stores in IndexedDB:

• Cleared Stores (10): orders, payments, returns, claims, compensations, ads, settlements, import_jobs (import history and row error logs), source_files (file hashes and headers), and reconciliation_issues (discrepancies, review states, private notes, and manual link mappings).
• Preserved Store (1 — User Settings & Preferences): Clicking "Delete All Financial Data" preserves the settings object store (global_settings) so you do not lose your configured preferences. Specifically, the preserved settings store retains your UI theme (light/dark), daily scheduler preferences and last-run summary, product cost/COGS estimator settings (including any configured SKU costs), saved filter presets, custom column mappings, and supplier panel integration status metadata (including the last checked supplier.meesho.com page URL).

Note on Resetting Settings: The extension does not currently include a separate "Reset Settings & Preferences" button. To erase the preserved settings store as well, you can either uninstall the extension from Google Chrome or clear the extension's IndexedDB storage via Chrome Developer Tools / Chrome site data settings.

B. Uninstalling the Extension or Contacting Support

Uninstalling Sellora — Meesho Sync Pro from Google Chrome automatically deletes the entire SelloraMeeshoSyncProDB IndexedDB database (including all 10 financial stores and the settings store) from your browser. If you email us at godfather02092004@gmail.com requesting data deletion, please note that because all data is stored exclusively inside your own browser and never transmitted to our servers, we hold no server-side copies of your data and will guide you through running "Delete All Financial Data" or uninstalling the extension on your device.

8. Exported CSV & JSON Backup Files

• Manual Local Downloads: When you click any Export CSV button or Export Backup (.json) button, the browser saves that file directly to your computer's local Downloads folder.
• Manual Deletion Required for Downloaded Files: Browser security boundaries prevent Chrome extensions from deleting files stored in your operating system's filesystem. Clicking "Delete All Financial Data" inside the extension does not delete .csv or .json files that you previously downloaded to your computer; you must delete those files manually from your computer's storage.
• Backup Encryption & Passphrase Responsibility: When exporting a .json database backup, you may optionally enter a passphrase to encrypt the payload using Web Crypto PBKDF2 (100,000 iterations, SHA-256) and 256-bit AES-GCM. Your passphrase is used only in memory during encryption/decryption and is never stored. Because there is no cloud server or recovery key, a lost passphrase cannot be recovered. Backups exported without a passphrase and CSV exports are saved as unencrypted plain text.

9. Security & Credential Protection

• Cross-Context Message Validation: All internal messages between the popup, dashboard, content script, and background service worker are validated by validateExtensionMessage(), which explicitly rejects any message containing credential-related fields (password, cookie, sessionToken, authToken, secret, or authorization).
• Spreadsheet Formula Sanitization & Archive Safety: Uploaded CSV/XLSX cells are sanitized against spreadsheet formula injection (=, @, +, -), Excel <f> formula tags are never evaluated, and uploaded ZIP archives are checked against path traversal (..), executable extensions, file-size limits, and abnormal compression ratios.

10. Children's Privacy

Sellora — Meesho Sync Pro is a B2B commercial analytics utility designed for adult e-commerce sellers on the Meesho platform. It is not directed at children under the age of 18, and we do not knowingly collect any information from children.

11. Changes to This Privacy Policy

If we update this Privacy Policy to reflect new extension features or regulatory requirements, we will publish the revised policy at this URL and update the Effective Date and extension version number at the top of the page. Material changes to how data is handled will also be disclosed in the extension's release notes.

12. Contact Information & Governing Law

If you have any questions, concerns, or requests regarding this Privacy Policy or the privacy practices of Sellora — Meesho Sync Pro, please contact the publisher:

• Publisher / Developer: AV STUDIO & CO.
• Email: godfather02092004@gmail.com
• Location & Jurisdiction: Gujarat, India. This Privacy Policy shall be governed by and construed in accordance with the laws of India, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (as applicable), with courts in Gujarat, India having jurisdiction over any disputes.